Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
File: yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft (raw, json)
Hash identifier: xPAC65SWYa0/p0ePBNn8cRguePfthMZZZazq1212GHA=
Subject key identifier: 99:8A:3D:B9:F4:35:58:4E:2C:06:7F:2A:35:EA:9D:6E:DC:D7:62:0D
Authority key identifier: CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1
Certificate issuer: /CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
Certificate serial: 01A03E2924B816C5F2434B3779D306C0D71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
Manifest number: 011A
Signing time: Wed 26 Aug 2026 13:01:18 +0000
Manifest this update: Wed 26 Aug 2026 13:01:18 +0000
Manifest next update: Thu 27 Aug 2026 13:01:18 +0000
Files and hashes: 1: E_xpCOpsZ5-t1WX6WrI9YENITng.asa (hash: bNhbXuXh50hasGOTMO13Tz9lkiSAHuwhJ2TJlWd+gwg=)
2: yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl (hash: SAcyuTf0F2jaLA3ZzDnVKO2Vgf10Th7FA6KJiYkzi9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:29:24:b8:16:c5:f2:43:4b:37:79:d3:06:c0:d7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
Validity
Not Before: Aug 26 13:01:18 2026 GMT
Not After : Aug 27 13:01:18 2026 GMT
Subject: CN=998a3db9f435584e2c067f2a35ea9d6edcd7620d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:df:05:9e:b1:e8:6c:a1:59:7d:ca:4b:2a:
a3:4d:b4:af:4a:57:0d:96:c1:67:a7:ba:c9:1d:3d:
e7:ef:97:cd:25:9e:61:cf:93:68:ff:65:f2:1b:1b:
c5:20:23:09:22:77:cc:ef:41:2e:64:4d:22:8a:62:
f7:e5:f0:51:19:f4:d7:cc:e0:5f:70:57:e7:76:4b:
42:43:4e:79:00:e1:62:57:8b:81:ed:d8:36:c4:a8:
c0:d1:66:fb:5e:60:9c:7a:ca:0d:cf:93:1a:79:93:
3a:76:fc:44:6a:4f:d9:82:46:b2:40:cc:b2:55:ba:
91:33:51:a2:51:0b:c2:e7:08:e4:ff:b7:2c:f9:be:
68:08:c1:2d:62:f4:57:96:ad:9d:f8:67:55:7c:08:
70:7c:64:0a:de:22:34:fa:73:04:29:73:e8:a1:61:
bb:c6:d0:dd:47:8a:6e:a6:bc:eb:b2:50:d8:2e:11:
81:52:21:6a:81:90:81:08:87:21:be:f2:4a:be:68:
d1:1e:21:8a:7f:d6:64:8c:22:e3:a2:18:d8:db:63:
62:eb:04:6c:af:80:3e:d4:07:26:c2:81:2d:bb:d4:
5a:3e:fc:89:af:c0:f4:78:bf:09:0b:b9:de:5b:0f:
28:7d:c3:fc:3b:42:62:28:d5:41:21:40:4b:86:25:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:3D:B9:F4:35:58:4E:2C:06:7F:2A:35:EA:9D:6E:DC:D7:62:0D
X509v3 Authority Key Identifier:
keyid:CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7c:12:26:42:92:ed:23:8f:74:72:94:73:89:14:61:dd:d9:
ed:2a:c9:6b:18:53:36:88:ea:eb:2f:ec:0a:2c:f0:b6:e7:a6:
87:4a:21:17:75:37:8c:76:19:c8:79:78:f2:73:d8:a8:7f:6a:
c4:20:72:c9:40:01:46:ab:68:2b:de:57:57:86:78:02:3a:a3:
02:33:ff:fc:7c:b6:ca:5a:31:b9:cf:34:6f:8f:f2:41:fd:44:
3d:7c:a2:aa:84:2e:f7:1a:c2:20:03:84:44:f6:18:7b:17:0e:
d2:1e:b1:35:9e:90:98:d3:24:4d:f0:f1:e9:eb:28:0a:62:4a:
46:01:55:ca:02:7c:2a:7f:01:e2:4e:9d:de:bf:71:05:73:32:
79:fc:a0:7c:61:6d:73:9a:a3:d2:56:af:00:75:97:c7:58:16:
8b:e3:c3:e9:9f:a5:92:df:59:0c:51:b6:20:1b:54:ce:1c:d4:
f0:df:78:b9:82:b0:60:ab:c8:e5:fc:9a:3c:27:66:98:a8:74:
b3:46:56:90:d8:b0:6c:fc:f6:f5:40:b5:27:92:8e:d6:d8:2b:
9f:a6:63:9f:61:fd:7a:64:fe:16:7f:5a:ed:d1:90:e1:db:42:
9b:c2:fa:1d:9c:27:cd:2c:26:fb:3c:40:fa:65:4a:9f:a8:1b:
7b:af:c1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:11:00 2026 by rpki-client